Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12C6890C609911F0803FF582DAE4EC9C.roa
File: 12C6890C609911F0803FF582DAE4EC9C.roa (raw, json)
Hash identifier: kXLHEC1taWtQwqtIbmsqxdgVt0cZWR17V39jpki161w=
Subject key identifier: BF:0E:A5:B1:F3:FE:6E:5F:B7:7E:42:C0:AC:92:68:CB:EF:D8:0D:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DAB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12C6890C609911F0803FF582DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 09:58:21 +0000
ROA not before: Mon 14 Jul 2025 09:58:17 +0000
ROA not after: Sun 19 Oct 2025 09:58:17 +0000
asID: 150698
IP address blocks: 154.196.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101803 (0x18dab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 09:58:17 2025 GMT
Not After : Oct 19 09:58:17 2025 GMT
Subject: CN=6874d4bd-31e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:84:d4:6f:83:4a:cf:3a:e7:6d:12:ef:cb:
01:73:ac:ee:3e:4e:ce:17:fb:1f:70:b6:ed:fd:22:
e5:d7:11:8a:f8:61:7e:0c:16:35:5e:03:44:9c:b0:
9d:75:0f:96:20:5d:b4:0d:da:1d:56:5c:dd:a3:1e:
4b:7b:b6:03:c9:05:5a:47:59:6e:12:e4:1b:39:ff:
cd:fb:54:88:8b:c1:a9:f2:60:75:ef:a9:20:ce:7b:
50:cc:94:f1:19:40:31:1c:d6:35:14:fd:eb:ef:3a:
c1:2e:ba:91:64:5b:8e:be:c3:38:ac:36:ad:42:78:
21:94:18:26:d6:58:bd:35:20:2c:11:04:0a:f4:25:
3d:1c:48:97:b4:c0:5e:cc:5f:7e:2f:12:98:fe:56:
b0:e6:e9:ba:a3:0e:48:95:20:4a:18:56:57:be:99:
cd:6f:d7:09:f4:52:ae:a9:80:bd:9b:51:23:f6:8e:
1b:24:fc:bb:9a:9e:09:54:d4:7d:dc:3c:b6:08:c3:
d3:e0:fd:3f:7b:90:4c:f1:f0:4b:1a:87:aa:91:73:
54:27:59:a1:5d:b6:3d:5c:00:8e:fc:8d:54:bd:a7:
df:a4:b4:73:af:a3:f2:3a:53:2b:e4:0d:f5:f8:cb:
11:0c:50:3b:38:f2:90:5f:c5:91:0c:95:08:a9:d9:
bb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0E:A5:B1:F3:FE:6E:5F:B7:7E:42:C0:AC:92:68:CB:EF:D8:0D:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12C6890C609911F0803FF582DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.92.0/22
Signature Algorithm: sha256WithRSAEncryption
36:7c:f4:fa:50:68:c3:50:2e:f8:13:52:db:35:43:69:40:33:
75:37:8b:e2:95:82:ce:cc:dc:e4:78:30:5e:e7:37:fc:fc:f6:
34:f5:9a:62:d6:7d:66:99:29:eb:50:13:09:74:c3:3e:f7:3a:
f7:b4:83:c7:0a:29:4e:f7:a7:31:81:88:a2:a4:62:43:1e:57:
c4:6a:e1:e1:f7:92:6f:5b:89:b6:9b:94:d9:51:92:f9:c6:dc:
7a:d3:ef:ae:20:13:58:82:ed:3a:1e:2b:eb:5f:03:f8:df:ab:
4f:1b:6c:4d:1a:96:cb:49:8b:22:f6:69:05:1f:56:4b:b6:22:
1c:d8:b3:d4:cf:f5:7d:a4:b8:ad:d5:1d:b7:38:7d:17:74:a8:
5e:0d:57:e8:27:e4:06:35:70:18:8a:fc:bb:31:56:e0:d1:94:
5b:ce:3e:90:8b:d7:24:ab:fe:88:ed:5c:8b:f9:00:e0:a2:bc:
03:1d:44:3f:fc:f6:7a:12:b4:da:ad:26:8a:1d:58:d5:e2:22:
5e:0a:c4:70:e0:15:77:62:89:4f:e1:93:3a:11:ab:8c:63:60:
8f:37:17:cc:e3:ad:ea:75:14:74:d4:77:34:3f:87:5f:e7:4d:
f3:aa:4a:13:7e:ea:26:49:9e:f2:36:52:f4:1c:91:32:9d:fe:
38:a1:d8:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAY2rMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzE0MDk1ODE3WhcNMjUxMDE5MDk1ODE3WjAYMRYw
FAYDVQQDEw02ODc0ZDRiZC0zMWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt2uE1G+DSs86520S78sBc6zuPk7OF/sfcLbt/SLl1xGK+GF+DBY1XgNE
nLCddQ+WIF20DdodVlzdox5Le7YDyQVaR1luEuQbOf/N+1SIi8Gp8mB176kgzntQ
zJTxGUAxHNY1FP3r7zrBLrqRZFuOvsM4rDatQnghlBgm1li9NSAsEQQK9CU9HEiX
tMBezF9+LxKY/law5um6ow5IlSBKGFZXvpnNb9cJ9FKuqYC9m1Ej9o4bJPy7mp4J
VNR93Dy2CMPT4P0/e5BM8fBLGoeqkXNUJ1mhXbY9XACO/I1UvaffpLRzr6PyOlMr
5A31+MsRDFA7OPKQX8WRDJUIqdm7UQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL8O
pbHz/m5ft35CwKySaMvv2A3IMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMkM2ODkwQzYwOTkxMUYwODAzRkY1ODJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsRcMA0GCSqGSIb3DQEB
CwUAA4IBAQA2fPT6UGjDUC74E1LbNUNpQDN1N4vilYLOzNzkeDBe5zf8/PY09Zpi
1n1mmSnrUBMJdMM+9zr3tIPHCilO96cxgYiipGJDHlfEauHh95JvW4m2m5TZUZL5
xtx60++uIBNYgu06HivrXwP436tPG2xNGpbLSYsi9mkFH1ZLtiIc2LPUz/V9pLit
1R23OH0XdKheDVfoJ+QGNXAYivy7MVbg0ZRbzj6Qi9ckq/6I7VyL+QDgorwDHUQ/
/PZ6ErTarSaKHVjV4iJeCsRw4BV3YolP4ZM6EauMY2CPNxfM463qdRR01Hc0P4df
503zqkoTfuomSZ7yNlL0HJEynf44odip
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:40 2025 by rpki-client